Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: xvJYm25j8jtPE256rNlavpD5W38R6TJosPabirnKTJk=
Subject key identifier: E7:FA:45:92:DA:F2:CA:D5:CA:09:2B:26:88:5C:36:84:BE:B4:78:C2
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 0196A208F676BE5BF3C9F6AC6DCD476EF424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 01CB
Signing time: Mon 05 May 2025 20:00:18 +0000
Manifest this update: Mon 05 May 2025 20:00:18 +0000
Manifest next update: Tue 06 May 2025 20:00:18 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: KK5/YAQN+KCav9d+N4HjH1qEUvhgdwnQd6FVchtegCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:f6:76:be:5b:f3:c9:f6:ac:6d:cd:47:6e:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: May 5 20:00:18 2025 GMT
Not After : May 6 20:00:18 2025 GMT
Subject: CN=e7fa4592daf2cad5ca092b26885c3684beb478c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:52:88:6f:24:2a:7f:28:93:d8:c9:e2:a8:
c7:d4:86:ea:95:9c:ab:46:37:37:b8:1c:fd:7c:c5:
38:39:bd:0a:ad:ef:31:02:5a:f8:62:68:5a:5e:f9:
62:0b:b7:98:a2:db:4f:58:33:ee:20:32:e1:38:d6:
ed:5c:1c:d1:63:4a:7c:67:95:73:83:38:cc:b8:87:
a4:9e:ee:48:ad:fd:75:fa:ac:49:f7:72:8a:d2:52:
ea:7f:99:ae:16:ba:b4:5d:e5:e6:0f:3d:11:52:53:
0d:00:6f:d9:d9:bd:73:6f:ff:7a:89:b2:6a:b7:1f:
de:bb:2e:a0:c5:ea:52:f2:78:ca:b3:b9:ac:1d:15:
83:19:e5:49:9a:3b:ef:95:15:8d:34:37:0e:11:71:
a5:05:a2:b4:71:5a:01:dd:1e:3f:65:af:9e:48:73:
d9:c8:17:de:95:e8:34:1b:2d:fa:b2:7f:5a:01:6d:
ee:09:24:f4:8d:f2:8c:09:a6:f4:6e:94:08:db:5e:
b0:9b:37:26:5f:c5:c2:32:db:2b:14:9c:b2:48:c1:
da:fc:87:42:e7:52:8b:a3:72:d9:4b:46:4f:36:11:
7a:ee:72:2e:30:2b:19:da:41:8d:dc:e6:f1:f0:4c:
ca:81:5a:87:19:e2:e3:8c:43:ab:aa:a5:02:a3:ff:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:45:92:DA:F2:CA:D5:CA:09:2B:26:88:5C:36:84:BE:B4:78:C2
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:06:56:81:49:52:3f:f2:28:0a:0d:41:84:11:c6:4c:3d:94:
5d:2a:34:53:dd:01:cb:e5:77:58:7d:af:d2:db:5f:46:bc:fb:
99:e3:7f:12:a2:43:7d:1d:46:dd:ef:7d:6a:dc:1c:fb:db:d1:
8b:91:99:1f:51:c6:0e:96:a2:f7:30:0d:9f:d7:9f:aa:a8:e2:
27:18:42:16:9a:f0:91:aa:28:04:44:3d:14:39:a4:3d:3e:d9:
f6:cb:f0:ff:f3:4e:8b:73:e8:e3:39:45:b2:35:c0:99:1b:e6:
aa:9d:bf:94:5a:33:0c:e1:03:35:26:e0:80:86:e5:52:9e:cf:
33:7b:17:bf:54:d0:02:b4:96:0b:dd:79:0f:3b:38:4c:73:10:
75:28:a1:47:cc:d2:8b:70:90:fc:4c:2d:05:bf:75:43:89:62:
46:19:86:da:90:25:5a:0d:8b:b9:7c:dc:7e:a8:93:de:cb:60:
7f:97:8b:8e:1a:aa:19:51:d2:4d:f4:2f:9a:64:e8:57:c6:17:
c5:d3:51:27:2c:88:22:e4:60:4e:a5:c2:07:f2:4e:af:58:31:
82:82:e2:b4:98:9d:07:2a:d6:3f:57:3c:51:f8:2f:7c:f9:c6:
6c:eb:18:7a:22:75:6b:fe:bf:2e:0d:3e:69:02:d7:1b:30:36:
4d:bd:2e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiCPZ2vlvzyfasbc1HbvQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGIyMDMyYzM4ZmIxN2Y0MmY4ODMyYTRjMjFlMWYwZDVm
MTllZTAwHhcNMjUwNTA1MjAwMDE4WhcNMjUwNTA2MjAwMDE4WjAzMTEwLwYDVQQD
EyhlN2ZhNDU5MmRhZjJjYWQ1Y2EwOTJiMjY4ODVjMzY4NGJlYjQ3OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCtSiG8kKn8ok9jJ4qjH1IbqlZyr
Rjc3uBz9fMU4Ob0Kre8xAlr4YmhaXvliC7eYottPWDPuIDLhONbtXBzRY0p8Z5Vz
gzjMuIeknu5Irf11+qxJ93KK0lLqf5muFrq0XeXmDz0RUlMNAG/Z2b1zb/96ibJq
tx/euy6gxepS8njKs7msHRWDGeVJmjvvlRWNNDcOEXGlBaK0cVoB3R4/Za+eSHPZ
yBfeleg0Gy36sn9aAW3uCST0jfKMCab0bpQI216wmzcmX8XCMtsrFJyySMHa/IdC
51KLo3LZS0ZPNhF67nIuMCsZ2kGN3Obx8EzKgVqHGeLjjEOrqqUCo//8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf6RZLa8srVygkrJohcNoS+tHjCMB8GA1UdIwQY
MBaAFDJLIDLDj7F/QviDKkwh4fDV8Z7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMt
NDM2MGVlMDZhMjJjLzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMtNDM2MGVlMDZhMjJj
LzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAZWgUlS
P/IoCg1BhBHGTD2UXSo0U90By+V3WH2v0ttfRrz7meN/EqJDfR1G3e99atwc+9vR
i5GZH1HGDpai9zANn9efqqjiJxhCFprwkaooBEQ9FDmkPT7Z9svw//NOi3Po4zlF
sjXAmRvmqp2/lFozDOEDNSbggIblUp7PM3sXv1TQArSWC915Dzs4THMQdSihR8zS
i3CQ/EwtBb91Q4liRhmG2pAlWg2LuXzcfqiT3stgf5eLjhqqGVHSTfQvmmToV8YX
xdNRJyyIIuRgTqXCB/JOr1gxgoLitJidByrWP1c8UfgvfPnGbOsYeiJ1a/6/Lg0+
aQLXGzA2Tb0usA==
-----END CERTIFICATE-----
Generated at Tue May 6 03:05:53 2025 by rpki-client